Re: [dm-crypt] LUKS keyslot 4 is invalid

From: Arno Wagner <arno@wagner.name>
To: dm-crypt@saout.de
Subject: Re: [dm-crypt] LUKS keyslot 4 is invalid
Date: Thu, 20 Nov 2014 20:04:40 +0100	[thread overview]
Message-ID: <20141120190440.GA7061@tansi.org> (raw)
In-Reply-To: <CAKG3i5rcc-cHDvjhagCjyhvzA+bttO3zdka+OHsWkjebZ3svww@mail.gmail.com>

Hi s4per,

this should be caused by something wrinign over the info for
Keyslot 4 (and possibly later) in the header. 

First, before you do anything, make that header backup, as described
in the FAQ, Itmm 6.2.  It will prevent things from getting worse. 
(http://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions)

Usually, you key should be in keyslot 1 and that may still be 
intact. As you can see in FAQ Item 6.12, keyslot infor for 
keyslot 4 is stored at offset 0x190, so anything damaging it 
could also have damaged other fields in the LUKS header.
Still, give this a try:

   cryptsetup repair <device>

It may work, or it may give you another error. If so, please
post that here. (Do NOT do this wiothout header backup!)

Arno

On Wed, Nov 19, 2014 at 23:52:38 CET, Jarosław K wrote:
> Hi all,
> 
> I have an encrypted RAID 1 volume for /home directory. I set it to mount
> automatically after login (based on
> http://nanonanonano.net/linux/debian/enchome). All of it works perfect
> during a few months. Until today ... After login I saw a "clean" user
> profile on my Debian. I know that, my encrypted drive didn't mount
> correctly. Unfortunately, manually mount failed too:
> 
> root@s4per-debian:/home/s4per# cryptsetup luksOpen
> /dev/mapper/isw_echheajchc_Mirror crypt
> Numer klucza LUKS 4 jest nieprawidłowy.   ---> LUKS keyslot 4 is invalid (?)
> 
> I have read something about this issue, and now i think it could be problem
> with LUKS headers. But unfortunatelly i have no any backup of it.
> 
> In Poland we says "Polish wise after the event". Now I know, that I should
> make some backup of headers.
> 
> I kindly request for some help.
> 
> My OS: Debian Sid AMD64
> 
> Regards,
> 
> s4per

> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt

-- 
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno@wagner.name
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier